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In the Claims 

1. (Currently amended) A method for detection and correction of security vulnerabilities in a 
distributed computing envirorraient, comprising: 

analyzing by a plurality of agents a software solution to identify legal and illegal external 

interfaces thereto; 

attempting to access said software solution using the identified illegal external interfaces; 

and 

storing a record of any illegal external interfaces that allow access to said software 
solution at a plurality of databases associated with said plurality of agents . 

2. (Currently amended) The method of claim 1, wherein said software solution comprises at least 
two independent software programs interacting to form ^ sdd software solution. 

3. (Currently amended) The method of claim 1, fiirther comprising: 

automatically deploying a correctiye measure to said software solution based upon said 
identified illegal external interfaces. 

4. (Original) The method of claim 3, further comprising: 

storing each of said corrective measures in a memory. 

5. (Original) The method of claim 4, further comprising: 

making said stored record of illegal external interfaces that allow access, and said stored 
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record of corrective measures available to all users of said detection and correction method, on a 
global basis. 

6. (Original) The method of claim 5, wherein said stored record of illegal external interfaces that 
allow access, and said stored record of corrective measures is made available on a global basis 
via a network connection. 

7. (Original) The method of claim 1, wherein said analyzing step includes: 

analyzing an XML description of each legal and illegal external interface; and 
mapping each legal and illegal external interface into a machine-readable format. 

8. (Currently amended) A system for detection and correction of security vulnerabilities in a 
distributed computing environment, comprising: 

means for analyzing by a plurality of agents a software solution to identify legal and 
illegal external interfaces thereto; 

means for attempting to access said software solution using the identified illegal external 
interfaces; and 

means for storing a record of any illegal external interfaces that allow access to said 
software solution at a plurality of databases associated with said plurality of agents . 

9. (Currently amended) The system of claim 8, wherein said software solution comprises at least 
two independent software programs interacting to form fee said software solution. 
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10. (Currently amended) The system of claim 8, further comprising: means for automatically 
deploying a corrective measure to said software solution based upon said identified illegal 
external interfaces. 

11. (Original) The system of claim 10, further comprising: means for storing each of said 
corrective measures in a memory. 

12. (Currently amended) The system of claim 1 1, further comprising: 

means for making said stored record of illegal external interfaces that allow access, and 
said stored record of corrective measures available to all users of said detection and correction 
system mefeed, on a global basis. 

13. (Original) The system of claim 12, wherein said stored record of illegal external interfaces 
that allow access, and said stored record of corrective measures is made available on a global 
basis via a network connection. 

14. (Original) The system of claim 8, wherein said analyzing means includes: 

means for analyzing an XML description of each legal and illegal external interface; and 
means for mapping each legal and illegal external interface into a machine-readable 

format. 
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15. (Currently amended) A computer program product for detection and correction of security 
vulnerabilities in a distributed computing environment, the computer program product 
comprising a computer-readable storage medium having computer-readable program code 
embodied in the medium, the computer-readable program code comprising: 

computer-readable program code that analyzes a software solution at a plurality of agents 
to identify legal and illegal external interfaces thereto; 

computer-readable program code that attempts to access said software solution using the 
identified illegal external interfaces; and 

computer-readable program code that stores a record of any illegal external interfaces that 
allow access to said software solution at a plurality of databases associated with said plurality of 
agents . 

16. (Currently amended) The computer program product of claim 15, wherein said software 
solution comprises at least two independent software programs interacting to form fee said 
software solution. 

17. (Currently amended) The computer program product of claim 15, further comprising: 

computer-readable program code that automatically deploys a corrective measure to said 
software solution based upon said identified illegal external interfaces. 



18. (Original) The computer program product of claim 17, further comprising: 
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computer-readable program code that stores each of said corrective measures in a 
memory. 

19. (Currently amended) The computer program product of claim 18, further comprising: 

computer-readable program code that makes said stored record of illegal external 
interfaces that allow access, and said stored record of corrective measures available to all users of 
said detection and correction computer program product m e thod , on a global basis. 

20. (Original) The computer program product of claim 19, wherein said stored record of illegal 
external interfaces that allow access, and said stored record of corrective measures is made 
available on a global basis via a network connection. 

21. (Original) The computer program product of claim 15, wherein said computer-readable 
program code for analyzing the software solution includes: 

computer-readable program code that analyzes an XML description of each legal and 
illegal external interface; and 

computer-readable program code that maps each legal and illegal external interface into a 
machine-readable format. 



